因為公司部署k8s的時候需要在現(xiàn)場的內(nèi)網(wǎng)環(huán)境安裝，所以需要在無網(wǎng)環(huán)境進(jìn)行安裝k8s集群，所以在現(xiàn)場規(guī)劃設(shè)備和系統(tǒng)時，會優(yōu)先確定操作系統(tǒng)版本，保證安裝版本和操作系統(tǒng)的一致性
我們目前安裝k8s版本，采用的操作系統(tǒng)為CentOS7.9，所以本地使用虛擬機(jī)（vmware或virtualBox）創(chuàng)建一個精簡版的虛擬機(jī)。進(jìn)行離線下載安裝包
1.獲取k8s和docer的版本
k8s&docker&Centos: [ftp://ftp.rhce.cc/k8s/*](ftp://ftp.rhce.cc/k8s/*)
2.獲取yum源依賴包
前提：Centos虛擬機(jī)必須可以聯(lián)網(wǎng)！！！要不后面都玩不下去的。
[root@master01 yum.repos.d]# rm -rf /etc/yum.repos.d/* ; wget -P /etc/yum.repos.d/ ftp://ftp.rhce.cc/k8s/*
--2022-05-05 21:15:13-- ftp://ftp.rhce.cc/k8s/*
=> ‘/etc/yum.repos.d/.listing’
Resolving ftp.rhce.cc (ftp.rhce.cc)... 101.37.152.41
Connecting to ftp.rhce.cc (ftp.rhce.cc)|101.37.152.41|:21... connected.
Logging in as anonymous ... Logged in!
==> SYST ... done. ==> PWD ... done.
==> TYPE I ... done. ==> CWD (1) /k8s ... done.
==> PASV ... done. ==> LIST ... done.
3.# 創(chuàng)建本地倉庫包
[root@master01 ~]# yum install --downloadonly --downloaddir=/root/k8sOfflineSetup/packages \
> createrepo
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
docker-ce-stable | 3.5 kB 00:00:00
epel | 4.7 kB 00:00:00
extras | 2.9 kB 00:00:00
kubernetes | 1.4 kB 00:00:00
updates | 2.9 kB 00:00:00
(1/8): epel/x86_64/group_gz | 96 kB 00:00:00
(2/8): docker-ce-stable/x86_64/primary_db | 76 kB 00:00:00
(3/8): docker-ce-stable/x86_64/updateinfo | 55 B 00:00:00
(4/8): kubernetes/primary | 108 kB 00:00:00
(5/8): extras/7/x86_64/primary_db | 246 kB 00:00:00
…………………………….
Total 938 kB/s | 1.1 MB 00:00:01
exiting because "Download Only" specified
實用工具
[root@master01 ~]# yum install --downloadonly --downloaddir=/root/k8sOfflineSetup/packages \
> yum-utils \
> nfs-utils \
> wget
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
Package wget-1.14-18.el7_6.1.x86_64 already installed and latest version
Resolving Dependencies
--> Running transaction check
---> Package nfs-utils.x86_64 1:1.3.0-0.68.el7.2 will be installed
--> Processing Dependency: libtirpc >= 0.2.4-0.7 for package: 1:nfs-utils-1.3.0-0.68.el7.2.x86_64
--> Processing Dependency: gssproxy >= 0.7.0-3 for package: 1:nfs-utils-1.3.0-0.68.el7.2.x86_64
--> Processing Dependency: rpcbind for package: 1:nfs-utils-1.3.0-0.68.el7.2.x86_64
--> Processing Dependency: quota for package: 1:nfs-utils-1.3.0-0.68.el7.2.x86_64
--> Processing Dependency: libnfsidmap for package: 1:nfs-utils-1.3.0-0.68.el7.2.x86_64
--> Processing Dependency: libevent for package: 1:nfs-utils-1.3.0-0.68.el7.2.x86_64
--> Processing Dependency: keyutils for package: 1:nfs-utils-1.3.0-0.68.el7.2.x86_64
--> Processing Dependency: libtirpc.so.1()(64bit) for package: 1:nfs-utils-1.3.0-0.68.el7.2.x86_64
--> Processing Dependency: libnfsidmap.so.0()(64bit) for package: 1:nfs-utils-1.3.0-0.68.el7.2.x86_64
--> Processing Dependency: libevent-2.0.so.5()(64bit) for package: 1:nfs-utils-1.3.0-0.68.el7.2.x86_64
………………..
Total 789 kB/s | 2.1 MB 00:00:02
exiting because "Download Only" specified
docker 依賴包
[root@master01 ~]# yum install --downloadonly --downloaddir=/root/k8sOfflineSetup/packages \
> device-mapper-persistent-data \
> lvm2
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
Resolving Dependencies
--> Running transaction check
………………………
Total 983 kB/s | 3.8 MB 00:00:03
exiting because "Download Only" specified
docker
[root@master01 ~]# yum install --downloadonly --downloaddir=/root/k8sOfflineSetup/packages \
> docker-ce-19.03.5 \
> docker-ce-cli-19.03.5 \
> containerd.io
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
Resolving Dependencies
--> Running transaction check
…………….
------------------------------------------------------------------------------------------------------------------------
Total 731 kB/s | 99 MB 00:02:18
exiting because "Download Only" specified
kubelet
[root@master01 ~]# yum install --downloadonly --downloaddir=/root/k8sOfflineSetup/packages \
> kubelet-1.21.0 \
> kubeadm-1.21.0 \
> kubectl-1.21.0
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
Resolving Dependencies
--> Running transaction check
---> Package kubeadm.x86_64 0:1.21.0-0 will be installed
--> Processing Dependency: kubernetes-cni >= 0.8.6 for package: kubeadm-1.21.0-0.x86_64
--> Processing Dependency: cri-tools >= 1.13.0 for package: kubeadm-1.21.0-0.x86_64
---> Package kubectl.x86_64 0:1.21.0-0 will be installed
---> Package kubelet.x86_64 0:1.21.0-0 will be installed
--> Processing Dependency: socat for package: kubelet-1.21.0-0.x86_64
--> Processing Dependency: conntrack for package: kubelet-1.21.0-0.x86_64
--> Running transaction check
---> Package cri-tools.x86_64 0:1.23.0-0 will be installed
---> Package kubelet.x86_64 0:1.21.0-0 will be installed
--> Processing Dependency: conntrack for package: kubelet-1.21.0-0.x86_64
---> Package kubernetes-cni.x86_64 0:0.8.7-0 will be installed
---> Package socat.x86_64 0:1.7.3.2-2.el7 will be installed
--> Finished Dependency Resolution
Error: Package: kubelet-1.21.0-0.x86_64 (kubernetes)
Requires: conntrack
You could try using --skip-broken to work around the problem
You could try running: rpm -Va --nofiles --nodigest
—————————————————
報錯解決：
執(zhí)行yum clean all
重新下載即可，如下：
[root@master01 ~]# yum clean all
Loaded plugins: fastestmirror
Cleaning repos: base docker-ce-stable epel extras kubernetes updates
Cleaning up list of fastest mirrors
[root@master01 ~]# yum install --downloadonly --downloaddir=/root/k8sOfflineSetup/packages kubelet-1.21.0 kubeadm-1.21.0 kubectl-1.21.0
Loaded plugins: fastestmirror
Determining fastest mirrors
base | 3.6 kB 00:00:00
docker-ce-stable | 3.5 kB 00:00:00
epel | 4.7 kB 00:00:00
extras | 2.9 kB 00:00:00
kubernetes | 1.4 kB 00:00:00
updates | 2.9 kB 00:00:00
—————————
------------------------------------------------------------------------------------------------------------------------
Total 863 kB/s | 65 MB 00:01:16
exiting because "Download Only" specified
獲取kubeadm依賴鏡像
獲取kubeadm用到的鏡像列表，這步操作要在一臺安裝了docker的環(huán)境上操作。拉取完成后打包復(fù)制到資源包/root/k8sOfflineSetup/images目錄中。
從阿里云拉取鏡像
docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/kube-apiserver:v1.21.0
docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/kube-controller-manager:v1.21.0
docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/kube-scheduler:v1.21.0
docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/kube-proxy:v1.21.0
docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/pause:3.1
docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/etcd:3.4.3-0
docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/coredns:1.6.5
[root@master01 ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
registry.cn-hangzhou.aliyuncs.com/google_containers/kube-apiserver v1.21.0 4d217480042e 13 months ago 126MB
registry.cn-hangzhou.aliyuncs.com/google_containers/kube-proxy v1.21.0 38ddd85fe90e 13 months ago 122MB
registry.cn-hangzhou.aliyuncs.com/google_containers/kube-scheduler v1.21.0 62ad3129eca8 13 months ago 50.6MB
registry.cn-hangzhou.aliyuncs.com/google_containers/kube-controller-manager v1.21.0 09708983cc37 13 months ago 120MB
registry.cn-hangzhou.aliyuncs.com/google_containers/coredns 1.6.5 70f311871ae1 2 years ago 41.6MB
registry.cn-hangzhou.aliyuncs.com/google_containers/etcd 3.4.3-0 303ce5db0e90 2 years ago 288MB
registry.cn-hangzhou.aliyuncs.com/google_containers/pause 3.1 da86e6ba6ca1 4 years ago 742kB
重新tag鏡像 —kubeadm調(diào)用的時候必須要是google的
docker images | grep registry.cn-hangzhou.aliyuncs.com/google_containers|sed 's/registry.cn-hangzhou.aliyuncs.com\/google_containers/k8s.gcr.io/'|awk '{print "docker tag " $3 " "$1":"$2}'|sh
刪除舊鏡像
docker images | grep registry.cn-hangzhou.aliyuncs.com/google_containers|awk '{print "docker rmi " $1":"$2}'|sh
在當(dāng)前目錄導(dǎo)出鏡像為壓縮包
docker save -o kube-controller-manager-v1.21.0.tar k8s.gcr.io/kube-controller-manager:v1.21.0
docker save -o kube-apiserver-v1.21.0.tar k8s.gcr.io/kube-apiserver:v1.21.0
docker save -o kube-scheduler-v1.21.0.tar k8s.gcr.io/kube-scheduler:v1.21.0
docker save -o kube-proxy-v1.21.0.tar k8s.gcr.io/kube-proxy:v1.21.0
docker save -o coredns-1.6.5.tar k8s.gcr.io/coredns:1.6.5
docker save -o etcd-3.4.3-0.tar k8s.gcr.io/etcd:3.4.3-0
docker save -o pause-3.1.tar [k8s.gcr.io/pause:3.1](http://k8s.gcr.io/pause:3.1)
**calico網(wǎng)絡(luò)插件依賴鏡像 **
從Quickstart for Calico on Kubernetes找到calico.yaml文件，命名為calico-v3.10.3.yaml保存到資源包/root/k8sOfflineSetup/plugins目錄中。
注意：當(dāng)前calico的版本3.10.3 已經(jīng)很老的，可以選擇新一點的版本，作者這邊拉取的是3.22.2，操作如下：
[root@master01 ~]# curl https://projectcalico.docs.tigera.io/manifests/calico.yaml -O
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 217k 100 217k 0 0 10633 0 0:00:20 0:00:20 --:--:-- 11727
[root@master01 ~]#
[root@master01 ~]# ls
1.sh anaconda-ks.cfg coredns-1.6.5.tar k8sOfflineSetup kube-controller-manager-v1.21.0.tar kube-scheduler-v1.21.0.tar
2.sh calico.yaml etcd-3.4.3-0.tar kube-apiserver-v1.21.0.tar kube-proxy-v1.21.0.tar pause-3.1.tar
[root@master01 ~]# cat calico.yaml | grep -i "Image:"
image: docker.io/calico/cni:v3.22.2
image: docker.io/calico/cni:v3.22.2
image: docker.io/calico/pod2daemon-flexvol:v3.22.2
image: docker.io/calico/node:v3.22.2
image: docker.io/calico/kube-controllers:v3.22.2
[root@master01 ~]# cat calico.yaml | grep -i "Image:"|awk '{print "docker pull "$2}'|sh
在當(dāng)前目錄導(dǎo)出鏡像為壓縮包
docker save -o calico-cni-v3.22.2.tar calico/cni:v3.22.2
docker save -o calico-pod2daemon-flexvol-v3.22.2.tar calico/pod2daemon-flexvol:v3.22.2
docker save -o calico-node-v3.22.2.tar calico/node:v3.22.2
docker save -o calico-kube-controllers-v3.22.2.tar calico/kube-controllers:v3.22.2
同樣拉取完成后打包復(fù)制到資源包/root/k8sOfflineSetup/images目錄中。
[root@master01 ~]# mkdir -p /root/k8sOfflineSetup/images
[root@master01 ~]# mv *.tar /root/k8sOfflineSetup/images/
自此相應(yīng)的安裝包已下載并保存完畢
